I have the M365 E5 license and a fleet of Windows 10 devices that are connected to MECM. We have the fleet AzureAD hybrid joined. I wish to enroll all devices in Intune but it seems that in order to do so a user with an E5 license (or at least the components of that license that enable Intune enrollment) must logon to the system. We have the GPO setting User credential as per this guide. This does require a logged on user however. The guide also mentions usage of a device credential. Could this be used to enroll without any logged on user? We do use co-management.